Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Access recertification is an information technology control that includes reviewing user access rights to see if they are proper and comply with the company's internal rules and laws. Recertification is a part of an organization's governance risk and compliance activity. Recertification or attestation are different terms for the same thing. GRC (governance, risk, and compliance) is a collection of rules and procedures that enable firms to achieve their business goals, deal with uncertainty, and behave with integrity. Depending upon the size of the company, whether public or non-pubic, and the industry they are in, such as banking or finance, etc., many companies are required by law to perform recertification or attestation of access.To maintain compliance, your users must have appropriate access to their roles. With the many systems and apps available, this is becoming more complicated and challenging, also known as attestation, is a process that helps organizations ensure that users have the appropriate level of access to the resources. At any point, the users should have only enough access needed to do their jobs, and the access complies with the company's policies and regulations. The process typically involves reviewing user access rights, such as permissions to access sensitive data or systems, and comparing them to the users' job responsibilities and roles within the organization. The final goal of the process is to find any discrepancies to investigate and address.

Managing user access and maintaining compliance is getting complex, with organizations having more systems and applications. EmpowerID allows you to manage your access certification and governance, audit your user access to critical systems and users, recertify them, discrepancies and provide revocation fulfillment, and much moreaccess revocation. With the help of the Recertification features provided by EmpowerID, you can automate the process of recertifying user access, eliminating the need for manual reviews and reducing the risk of human error. EmpowerID uses a task-based approach for Recertification; based on the policies, you can schedule the Audit of user access, this audit results in Business Requests which allows a user to recertify access easily from the Web Interface.

Caelor cards macro v2
title

...

qj13ma
content{"cards":[{"id":"107","title":"Overview of Recertification","icon":"font-awesome/BookOpen","color":{"san_francisco":{"background":"#ffffff1f","color":"#0099ff"},"austin":{"background":"#0099ff","color":"#000000"},"mumbai":{"background":"#0099ff"},"hong_kong":{"background":"#0099ff"},"cape_town":{"background":"#0099ff"},"palo_alto":{"color":"#0099ff"},"new_york":{"color":"#0099ff"},"madrid":{"color":"#0099ff"},"berlin":{"color":"#0099ff"},"la_paz":{"color":"#0099ff"},"sydney":{"color":"#0099ff"},"tokyo":{"background":"#ffffff1f","color":"#0052ccff"}},"iconType":"icon","newTab":"false","link":{"id":"2809030263","link":"https://dotnetworkflow.jira.com/wiki/x/d2Zupw","title":"Recertification Overview","type":"page","source":"page"},"overlay":{"isActive":true,"color":"#000","opacity":0.3},"borderRadius":12,"gap":25},{"id":"u4yvjo","title":"Recertification Policy Types","icon":"atlaskit/EditorBulletListIcon","color":{"san_francisco":{"background":"#ffffff1f","color":"#6083ff"},"austin":{"background":"#6083ff","color":"#000000"},"mumbai":{"background":"#6083ff"},"hong_kong":{"background":"#6083ff"},"cape_town":{"background":"#6083ff"},"palo_alto":{"color":"#6083ff"},"new_york":{"color":"#6083ff"},"madrid":{"color":"#6083ff"},"berlin":{"color":"#6083ff"},"la_paz":{"color":"#6083ff"},"sydney":{"color":"#6083ff"},"tokyo":{"background":"#ffffff1f","color":"#0052ccff"}},"iconType":"icon","newTab":"false","link":{"link":"https://dotnetworkflow.jira.com/wiki/spaces/EAGV22/pages/2809030327/Recertification+Policy+Types","source":"direct"},"overlay":{"isActive":true,"color":"#000","opacity":0.3},"borderRadius":12,"gap":25},{"id":"o9fub","title":"Recertification Prerequisites","icon":"material-design/Build","color":{"san_francisco":{"background":"#ffffff1f","color":"#ae84ff"},"austin":{"background":"#ae84ff","color":"#000000"},"mumbai":{"background":"#ae84ff"},"hong_kong":{"background":"#ae84ff"},"cape_town":{"background":"#ae84ff"},"palo_alto":{"color":"#ae84ff"},"new_york":{"color":"#ae84ff"},"madrid":{"color":"#ae84ff"},"berlin":{"color":"#ae84ff"},"la_paz":{"color":"#ae84ff"},"sydney":{"color":"#ae84ff"},"tokyo":{"background":"#ffffff1f","color":"#0052ccff"}},"iconType":"icon","newTab":"false","link":{"id":"2809030433","link":"https://dotnetworkflow.jira.com/wiki/x/IWdupw","title":"Pre-requisite for Recertification","type":"page","source":"page"},"overlay":{"isActive":true,"color":"#000","opacity":0.3},"borderRadius":12,"gap":25},{"id":"e0mfhn","title":"Recertification How-To","icon":"font-awesome/LaptopCode","color":{"san_francisco":{"background":"#ffffff1f","color":"#e677fb"},"austin":{"background":"#e677fb","color":"#000000"},"mumbai":{"background":"#e677fb"},"hong_kong":{"background":"#e677fb"},"cape_town":{"background":"#e677fb"},"palo_alto":{"color":"#e677fb"},"new_york":{"color":"#e677fb"},"madrid":{"color":"#e677fb"},"berlin":{"color":"#e677fb"},"la_paz":{"color":"#e677fb"},"sydney":{"color":"#e677fb"},"tokyo":{"background":"#ffffff1f","color":"#0052ccff"}},"iconType":"icon","newTab":"false","link":{"id":"2809030566","link":"https://dotnetworkflow.jira.com/wiki/x/pmdupw","title":"Recertification How-To","type":"page","source":"page"},"overlay":{"isActive":true,"color":"#000","opacity":0.3},"borderRadius":12,"gap":25}],"config":{"borderRadius":9,"gap":15,"type":"

...

text","columns":4,"layout":[],"design":"tokyo","textAlign":"left","height":180,"iconRadius":50,"iconSize":100}}


Note

There are prerequisites for the Recertification to work. Please ensure that the following jobs are enabled and running.

  • Attestation Policy Compiler Job

  • Business Request Fulfillment Job

...